From 7b8e21017212c495324c698cd6ed2f39d3dbd4a8 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 11 Apr 2021 07:52:21 +0000 Subject: [PATCH 1/3] fix: translations/zh-CN/content/actions/creating-actions/dockerfile-support-for-github-actions.md to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-DEBIAN9-APT-407402 - https://snyk.io/vuln/SNYK-DEBIAN9-GLIBC-356506 - https://snyk.io/vuln/SNYK-DEBIAN9-GLIBC-356506 - https://snyk.io/vuln/SNYK-DEBIAN9-GLIBC-356851 - https://snyk.io/vuln/SNYK-DEBIAN9-GLIBC-356851 --- .../creating-actions/dockerfile-support-for-github-actions.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/translations/zh-CN/content/actions/creating-actions/dockerfile-support-for-github-actions.md b/translations/zh-CN/content/actions/creating-actions/dockerfile-support-for-github-actions.md index 882bb4709c7b..db5860644e89 100644 --- a/translations/zh-CN/content/actions/creating-actions/dockerfile-support-for-github-actions.md +++ b/translations/zh-CN/content/actions/creating-actions/dockerfile-support-for-github-actions.md @@ -66,7 +66,7 @@ ENTRYPOINT ["sh", "-c", "echo $GITHUB_SHA"] ```dockerfile # Container image that runs your code -FROM debian:9.5-slim +FROM debian:stretch-20210329-slim # Copies your code file from your action repository to the filesystem path `/` of the container COPY entrypoint.sh /entrypoint.sh From 9ee46c4111c07868f3b3118ee65faf454c02c133 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 15 May 2021 17:15:51 +0000 Subject: [PATCH 2/3] fix: translations/zh-CN/content/actions/creating-actions/dockerfile-support-for-github-actions.md to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-DEBIAN9-GLIBC-356851 - https://snyk.io/vuln/SNYK-DEBIAN9-GLIBC-356851 - https://snyk.io/vuln/SNYK-DEBIAN9-GLIBC-356851 - https://snyk.io/vuln/SNYK-DEBIAN9-UTILLINUX-285822 - https://snyk.io/vuln/SNYK-DEBIAN9-UTILLINUX-285822 --- .../creating-actions/dockerfile-support-for-github-actions.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/translations/zh-CN/content/actions/creating-actions/dockerfile-support-for-github-actions.md b/translations/zh-CN/content/actions/creating-actions/dockerfile-support-for-github-actions.md index db5860644e89..e49975156c23 100644 --- a/translations/zh-CN/content/actions/creating-actions/dockerfile-support-for-github-actions.md +++ b/translations/zh-CN/content/actions/creating-actions/dockerfile-support-for-github-actions.md @@ -66,7 +66,7 @@ ENTRYPOINT ["sh", "-c", "echo $GITHUB_SHA"] ```dockerfile # Container image that runs your code -FROM debian:stretch-20210329-slim +FROM debian:buster-20210408-slim # Copies your code file from your action repository to the filesystem path `/` of the container COPY entrypoint.sh /entrypoint.sh From d02fe8b2c8a33c7dafa82489c027832209b845fd Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 19 Aug 2022 23:11:48 +0000 Subject: [PATCH 3/3] fix: package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ACTIONSCORE-2980270 - https://snyk.io/vuln/SNYK-JS-AJV-584908 - https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908 - https://snyk.io/vuln/SNYK-JS-ASYNC-2441827 - https://snyk.io/vuln/SNYK-JS-AWSSDK-1059424 - https://snyk.io/vuln/SNYK-JS-GOT-2932019 - https://snyk.io/vuln/SNYK-JS-SEMVERREGEX-1047770 - https://snyk.io/vuln/SNYK-JS-SEMVERREGEX-1584358 - https://snyk.io/vuln/SNYK-JS-SEMVERREGEX-1585624 - https://snyk.io/vuln/SNYK-JS-SEMVERREGEX-2824151 --- package.json | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/package.json b/package.json index 57dab2f1978b..a1153ec3ae0e 100644 --- a/package.json +++ b/package.json @@ -107,11 +107,11 @@ "webpack-cli": "^3.3.12" }, "devDependencies": { - "@actions/core": "^1.2.6", - "ajv": "^6.11.0", - "async": "^3.2.0", + "@actions/core": "^1.9.1", + "ajv": "^6.12.3", + "async": "^3.2.2", "await-sleep": "0.0.1", - "aws-sdk": "^2.610.0", + "aws-sdk": "^2.814.0", "babel-eslint": "^10.1.0", "chalk": "^4.0.0", "commander": "^6.2.0", @@ -133,7 +133,7 @@ "graphql": "^14.5.8", "heroku-client": "^3.1.0", "http-status-code": "^2.1.0", - "husky": "^4.2.1", + "husky": "^4.3.7", "image-size": "^0.7.4", "japanese-characters": "^1.1.0", "javascript-stringify": "^2.0.1", @@ -149,10 +149,10 @@ "mock-express-response": "^0.2.2", "mockdate": "^3.0.2", "nock": "^13.0.4", - "nodemon": "^2.0.4", + "nodemon": "^2.0.17", "npm-merge-driver-install": "^2.0.0", "object-hash": "^2.0.1", - "pa11y-ci": "^2.4.0", + "pa11y-ci": "^3.0.0", "prettier": "^2.1.2", "puppeteer": "^5.5.0", "replace": "^1.2.0",